The 'My XBL account got hacked over Xmas' thread

Thought I'd buy the LA Noire season pass on January 1st and discovered I had
10G in my MS points account. Which was odd. As I thought there should be a
lot more than that.

Tried to login to xbox.com and my password didn't work. Tried a password
reset but it was going to send it to some qq.com account which was nothing
to do with me. Anyway, after help from ON3Z3R0 over twitter I checked for
some FIFA12 achievements and lo and behold I had 2. On the phone of MS I go
and my account is now locked whilst they do some investigations.

Anyone else get hacked over the festive period?

--

WCZ

On 03/01/2012 09:52, WCZ wrote:
> Thought I'd buy the LA Noire season pass on January 1st and discovered I
> had 10G in my MS points account. Which was odd. As I thought there
> should be a lot more than that.
>
> Tried to login to xbox.com and my password didn't work. Tried a password
> reset but it was going to send it to some qq.com account which was
> nothing to do with me. Anyway, after help from ON3Z3R0 over twitter I
> checked for some FIFA12 achievements and lo and behold I had 2. On the
> phone of MS I go and my account is now locked whilst they do some
> investigations.
>
> Anyone else get hacked over the festive period?
>

No. But I can't change the email addresses on my Windows Live accounts,
so all my XBL stuff is connected to email addresses that haven't worked
for years. So perhaps I have, and I don't know!

On 03/01/2012 09:52, WCZ wrote:
> Thought I'd buy the LA Noire season pass on January 1st and discovered I
> had 10G in my MS points account. Which was odd. As I thought there
> should be a lot more than that.
>
> Tried to login to xbox.com and my password didn't work. Tried a password
> reset but it was going to send it to some qq.com account which was
> nothing to do with me. Anyway, after help from ON3Z3R0 over twitter I
> checked for some FIFA12 achievements and lo and behold I had 2. On the
> phone of MS I go and my account is now locked whilst they do some
> investigations.
>
> Anyone else get hacked over the festive period?
>

Only Ste I think
Assume they will give you your points back?

--
gospvg
[..getting old and still playing video games..]
http://www.gospvg.com

On 2012-01-03 09:52:40 +0000, WCZ said:

> Thought I'd buy the LA Noire season pass on January 1st and discovered
> I had 10G in my MS points account. Which was odd. As I thought there
> should be a lot more than that.
>
> Tried to login to xbox.com and my password didn't work. Tried a
> password reset but it was going to send it to some qq.com account which
> was nothing to do with me. Anyway, after help from ON3Z3R0 over
> twitter I checked for some FIFA12 achievements and lo and behold I had
> 2. On the phone of MS I go and my account is now locked whilst they do
> some investigations.
>
> Anyone else get hacked over the festive period?

No. Not yet.

BTW I changed my Windows Live ID password when I saw some accounts were
being hacked. I did it on xbox.com (I change it every now and then but
this is the first time with the new dash).

I then switched my 360 on and it signed into XBL without asking me for
the new password! How did it do that then?

Seems a bit weird. If your 360 gets stolen and your profile is on it,
wouldn't you change your password straight away so they couldn't get to
your account details? Apparently that wouldn't stop anything if my
experience is anything to go by!


PS as I discovered this evening the new dash removes the option to sign
out of XBL but remain signed in on your profile. You can pull the
ethernet cable but if you have a new 360 with built in wifi all you can
do is switch off your wifi/router or scramble the network settings to
prevent the profile connecting to XBL.

--
John Talbot
XBL, PSN, Twitter, Everything : jochta
Blog & Gaming Diary : http://www.buttonsofmymind.co.uk/
"Leading the fight..."

In article <4f04c852$0$23770$23d95989@unlimited.newshosting.c om>,
jochta <nope@noone.com> wrote:
>
>PS as I discovered this evening the new dash removes the option to sign
>out of XBL but remain signed in on your profile. You can pull the
>ethernet cable but if you have a new 360 with built in wifi all you can
>do is switch off your wifi/router or scramble the network settings to
>prevent the profile connecting to XBL.

This is why all my game systems have wired network links through a
wireless bridge. Does the Slim 360 not have a standard ethernet jack?

-KKC, who needs to back up his Tivo hard drive.
--
-- "Step 8: Make a list of all the persons I | kendrick
have harmed, and file them alphabetically | @io-nyc.com
for ease of reference." |
- David Javerbaum, "The Last Testament" |

Kendrick Kerwin Chua <kendrick@nospam.io-nyc> wrote:
> In article <4f04c852$0$23770$23d95989@unlimited.newshosting.c om>,
> jochta <nope@noone.com> wrote:
>>
>> PS as I discovered this evening the new dash removes the option to sign
>> out of XBL but remain signed in on your profile. You can pull the
>> ethernet cable but if you have a new 360 with built in wifi all you can
>> do is switch off your wifi/router or scramble the network settings to
>> prevent the profile connecting to XBL.
>
> This is why all my game systems have wired network links through a
> wireless bridge. Does the Slim 360 not have a standard ethernet jack?
>

Yes that is what I am using, I only found out this evening for John that it
came with built in wi-fi

--
[..getting old and still playing video games..]

On 04/01/2012 21:44, jochta wrote:
>
> BTW I changed my Windows Live ID password when I saw some accounts were
> being hacked. I did it on xbox.com (I change it every now and then but
> this is the first time with the new dash).
>
> I then switched my 360 on and it signed into XBL without asking me for
> the new password! How did it do that then?
>
> Seems a bit weird. If your 360 gets stolen and your profile is on it,
> wouldn't you change your password straight away so they couldn't get to
> your account details? Apparently that wouldn't stop anything if my
> experience is anything to go by!

Maybe they matched your ip to your machine and determined you are genuine.

....OK this is MS, so no not that.

-Kevin.

"WCZ" <dav123@willnotwork.com> wrote in message
news:jduj3r$up3$1@speranza.aioe.org...
> Thought I'd buy the LA Noire season pass on January 1st and discovered I
> had 10G in my MS points account. Which was odd. As I thought there should
> be a lot more than that.
>
> Tried to login to xbox.com and my password didn't work. Tried a password
> reset but it was going to send it to some qq.com account which was nothing
> to do with me. Anyway, after help from ON3Z3R0 over twitter I checked for
> some FIFA12 achievements and lo and behold I had 2. On the phone of MS I
> go and my account is now locked whilst they do some investigations.
>
> Anyone else get hacked over the festive period?
>

Small update. Got an email from MS with a 1 month XBL code in it which I
can use to 'create a temporary account so I can continue to use XBL whilst
we are investigating' or save it and add it onto my real account if it ever
comes back. I'm going for the latter.

In other news my 12 month sub card from Amazon has shipped.

--

WCZ

On 05/01/2012 00:08, gunthergloop wrote:
> On 04/01/2012 21:44, jochta wrote:
>>
>> BTW I changed my Windows Live ID password when I saw some accounts were
>> being hacked. I did it on xbox.com (I change it every now and then but
>> this is the first time with the new dash).
>>
>> I then switched my 360 on and it signed into XBL without asking me for
>> the new password! How did it do that then?
>>
>> Seems a bit weird. If your 360 gets stolen and your profile is on it,
>> wouldn't you change your password straight away so they couldn't get to
>> your account details? Apparently that wouldn't stop anything if my
>> experience is anything to go by!
>
> Maybe they matched your ip to your machine and determined you are genuine.
>
> ...OK this is MS, so no not that.
>
> -Kevin.
>

"profile logins from other consoles are not authenticated by password"

Which explains why it worked. Luckily you can set the "require password
on all consoles" flag on xbox.com. So if your 360 did get nicked with
your profile on it you can require the new owner to log on with password.

--
John Talbot
XBL, PSN, Twitter, Everything : jochta
Blog & Gaming Diary : http://www.buttonsofmymind.co.uk/
"Leading the fight..."